System and Method for High-Assurance Data Storage and Processing based on Homomorphic Encryption

Abstract

A key value storage (KVS) system comprising: a client-side agent configured to encrypt data; three nodes hosted respectively in three cloud service providers, wherein each node comprises: a management node configured to receive encrypted data from the client-side agent, a homomorphic encryption (HE) key manager configured to fetch a public key of a given object in the KVS system, a homomorphic encryption and processing engine configured to execute commands over the encrypted data without decrypting it, a homomorphic memory store, a hypervisor configured to monitor performance of the management node in order to assess the quality of service of the management node; and wherein each node serves on a rotating basis in a master node role, a secondary node role, or a back-up node role, wherein the nodes rotate their roles when the master node's hypervisor detects a reduced quality of service of the master node's management node.

Description

FEDERALLY-SPONSORED RESEARCH AND DEVELOPMENT[0001]The United States Government has ownership rights in this invention. Licensing and technical inquiries may be directed to the Office of Research and Technical Applications, Space and Naval Warfare Systems Center, Pacific, Code 72120, San Diego, Calif., 92152; voice (619) 553-5118; ssc_pac_t2@navy.mil. Reference Navy Case Number 102930.CROSS-REFERENCE TO RELATED APPLICATION[0002]This application is related to U.S. Application No.: UNKNOWN, filed EVEN DATE, titled “Cybernaut: A Cloud-Oriented Energy-Efficient Intrusion-Tolerant Hypervisor” (Navy Case #102492), which application is hereby incorporated by reference herein in its entirety for its teachings.BACKGROUND OF THE INVENTION[0003]This invention relates to the field of data storage and processing. Data storage systems are critical to the information age. With over 100 terabytes of data uploaded to the internet on a daily basis (as of 2012), and with 35 zettabytes of data expected ...

AI Technical Summary

Benefits of technology

[0004]Described herein is a key value storage (KVS) system comprising: a client-side agent and first, second, and third nodes. The client-side agent is configured to encrypt data, and only the client-side agent can decrypt the data. The first, second, and third nodes are hosted respectively in first, second, and third cloud service providers. Each of the first, second, and third nodes comprises: a management node, a homomorphic encryption (HE) key manager, a homomorphic encryption and processing engine, a homomorphic memory store, and a hypervisor. Each management node is configured to receive encrypted data from the client-side agent. Each HE key manager is communicatively coupled to the management node and configured to fetch a public key of a given object in the KVS system to enable object key to public key mapping. Each homomorphic encryption and processing engine is communicatively coupled to the management node and configured to execute commands over the encrypted data without decrypting it. Each homomorphic memory store is communicatively coupled to the management node. Each hypervisor is communicatively coupled to the management node and configured to monitor performance of the management node in order to assess the quality of service of the management node. Each of the first, second, or third nodes serves on a rotating basis in a master node role, a secondary node role, or a back-up node role. The first, second, and third nodes rotate their roles when the master node's hypervisor detects a reduced quality of service of

Problems solved by technology

Moreover, over the past decade, data breaches and theft episodes are being reported all over the world.

This means that the problem is twofold: 1) data availability is critical in the information age, and

Images